generated: '2026-07-18'
method: derived
source: openapi/contalink-openapi-original.json
standards:
- id: openapi-3.0
  conforms: true
  evidence: openapi field is "3.0.0" and the document validates
- id: rest
  conforms: true
  evidence: resource-oriented paths over HTTPS with standard HTTP verbs (GET/POST/PATCH/DELETE)
- id: api-key-auth
  conforms: true
  evidence: securitySchemes declares apiKey in header (Authorization)
- id: oauth2
  conforms: false
  evidence: no oauth2 security scheme; authentication is a static per-company API key
- id: oidc
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: responses use a custom {status, message} envelope, not application/problem+json
- id: pagination
  conforms: true
  evidence: GET /invoices/list/ supports page-number pagination via the `page` query parameter
- id: idempotency
  conforms: false
  evidence: no idempotency-key header/parameter documented
- id: fhir
  conforms: false
- id: scim
  conforms: false
- id: odata
  conforms: false
notes: >-
  Derived from OpenAPI structure only. No published compliance/certification
  program (SOC 2 / ISO 27001 / PCI) was found, so no `Compliance` pointer is
  emitted — this file asserts technical standards conformance only.